Privacy Policy

Roto Privacy Policy

This Application collects certain Personal Data of its Users.

This document can be printed out for reference using the print command in the settings of any browser.

Owner and Data Controller

Roto S.r.l Via del lavoro 16 40050 monterenzio (BO) R.E.A :19216 P.Iva: IT00502031206

Types of Data collected

Among the Personal Data collected by this Application, either independently or through third parties, are: Tracker; Usage Data; first name; last name; country; email address.

Full details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by means of specific explanatory texts displayed prior to the collection of such Data. Personal Data may be freely provided by the User or, in the case of User Data, automatically collected during the use of this Application. Unless otherwise specified, all Data requested by this Application are mandatory and failure to provide them may make it impossible for this Application to provide its services. In cases where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation.Users who have doubts as to which Personal Data are mandatory are invited to contact the Data Controller.The possible use of Cookies - or of other tracking tools - by this Application or by the owners of third party services used by this Application, where this Application has the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees that he/she has the right to communicate or disseminate them, releasing the Owner from any liability towards third parties.

Modalities and place of Data processing

Processing methods

The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Data. The Data is processed using IT and/or telematic instruments, with organisational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organisation of this Application (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller, may have access to the Data. The updated list of such subjects may be requested from the Controller at any time.

Legal basis of the processing

The Data Controller may process Personal Data relating to Users if one of the following conditions is met:

• Users have given their consent for one or more specific purposes. Note: In some legislations, the Controller may be allowed to process Personal Data until the User objects to such processing ("opt-out"), without relying on consent or any other of the following legal bases. This does not apply, however, whenever the processing of Personal Data is subject to European data protection law;
• the provision of the Data is necessary for the performance of a contract with the User and/or for any pre-contractual obligations of the User
• the processing is necessary to fulfil a legal obligation to which the Controller is subject;
• the processing is related to a task carried out in the public interest or in the exercise of public powers vested in the Controller;
• the processing is necessary for the pursuit of the legitimate interest of the Controller or of third parties.

In any case, the Controller will be happy to help clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a legal or contractual requirement, or a necessary requirement to enter into a contract.

Location

The Data is processed at the Data Controller's business premises and at any other location where the parties involved in the processing are located. Depending on the User's location, data transfers may involve the transfer of the User's Data to a country other than their own. To learn more about where such transferred Data are processed, Users may consult the section containing details on the processing of Personal Data.

Users are also entitled to know the legal basis for transfers of Data to a country outside the European Union or to any international organisation governed by public international law or established by two or more countries, such as the UN, and the security measures taken by the Data Controller to safeguard its Data. Users can find out more by consulting the relevant sections of this document or inquire with the Data Controller using the information provided in the contact section.

Storage time

Personal Data will be processed and stored for as long as required by the purpose for which it was collected.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of such contract is completed.
• Personal Data collected for purposes of legitimate interest of the Data Controller will be retained as long as necessary to fulfil such purposes. Users can find specific information about the legitimate interests pursued by the Controller within the relevant sections of this document or by contacting the Controller.

The Controller may be authorised to retain Personal Data for a longer period whenever the User has given consent to such processing, provided that such consent is not withdrawn. In addition, the Controller may be obliged to retain Personal Data for a longer period whenever this is required for the performance of a legal obligation or by order of an authority. Once the retention period has expired, the Personal Data will be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after the expiry of the retention period.

The purposes of processing

The User's Data are collected to enable the Data Controller to provide the Service, to comply with legal obligations, to respond to requests or enforcement actions, to protect its rights and interests (or those of Users or third parties), to detect any malicious or fraudulent activities, as well as for the following purposes: Statistics, Tag Management, Displaying content from external platforms and Contacting the User.

For specific information on the Personal Data used for each purpose, the User may refer to the section "Detailed information on the processing of Personal Data".

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

• Analytics

The services contained in this section allow the Data Controller to monitor and analyse web traffic and can be used to track User behaviour.

Google Analytics (Google Ireland Limited)

Google Analytics is a web analysis service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected in order to track and examine the use of this Application, compile reports and share them with other services developed by Google. Google may use the collected Data to contextualise and personalise the ads of its advertising network.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland - Privacy Policy - Opt Out.

Google Analytics with anonymized IP (Google Ireland Limited)

Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected in order to track and examine the use of this Application, compile reports and share them with other services developed by Google. Google may use the collected Data to contextualise and personalise the ads of its advertising network. This Google Analytics integration makes your IP address anonymous. It works by abbreviating the IP addresses of users within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server and abbreviated in the USA.

Personal data processed: Tracker; Usage Data.

Place of processing: Ireland - Privacy Policy - Opt Out.

• Contacting the user

Contact form (this Application)

The User, by filling out the contact form with his/her Data, consents to the use of such Data to respond to requests for information, quotes, or any other nature indicated by the header of the form.

Personal Data processed: country; email address; first name; last name.

• Displaying content from external platforms

This type of service makes it possible to display content hosted on external platforms directly from the pages of this Application and to interact with them. This type of service may still collect web traffic data for the pages where the service is installed, even when Users do not use it.

Google Fonts (Google Ireland Limited)

Google Fonts is a font display service provided by Google Ireland Limited that allows this Application to embed font content on its pages.

Personal data processed: Tracker; Usage Data.

Place of processing: Ireland - Privacy Policy.

Google Maps widget (Google Ireland Limited)

Google Maps is a map display service provided by Google Ireland Limited that allows this Application to embed content of this type in its pages.

Personal data processed: Tracker; Usage Data.

Place of processing: Ireland - Privacy Policy.

Tag management

This type of service helps the Controller to manage the tags or scripts required on this Application in a centralised manner. This results in User Data flowing through these services, potentially resulting in the retention of this Data.

Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland - Privacy Policy.

Users' rights

Users may exercise certain rights in relation to their Data processed by the Data Controller.

In particular, Users have the right to do the following:

• Withdrawtheir consent at any time. Users have the right to withdraw their consent where they have previously given their consent to the processing of their Personal Data.
• Object tothe processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
• Access to one's own Data. Users have the right to know whether Data is being processed by the Data Controller, to obtain information on certain aspects of the processing and to obtain a copy of the Data being processed.
• Check and request rectification. The Users have the right to verify the accuracy of their Data and request that it be updated or corrected.
• Limit the processing of their Data. Users have the right, under certain circumstances, to limit the processing of their Data. In this case, the Data Controller will not process their Data for purposes other than its storage.
• Have their Data deleted or otherwise removed. Users have the right, under certain circumstances, to have their Data deleted by the Data Controller.
• Receive their Data and have them transferred to another data controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transferred to another data controller without hindrance. This provision is applicable provided that the Data are processed by automated means and that the processing is based on the User's consent, on a contract to which the User is party or on pre-contractual obligations of the User.
• Submittinga complaint. Users have the right to lodge a complaint with their competent data protection authority.

Details of the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Controller or for the purposes of the legitimate interests pursued by the Controller, Users may object to such processing by providing a reason relating to their particular situation to justify the objection.

Users should be aware that, however, if their Personal Data are processed for direct marketing purposes, they may object to such processing at any time without providing any justification. To find out whether the Controller processes Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise these rights

Any requests to exercise the User's rights may be addressed to the Controller through the contact details provided in this document. Such requests may be exercised free of charge and will be addressed by the Controller as soon as possible and always within one month.

Cookie policy

This Application uses Tracker. To learn more, the User may consult the Cookie Policy.

More information on data collection and processing

Legal Actions

The User's Personal Data may be used by the Owner in legal proceedings or in the preparatory phases of such proceedings to defend against abuses in the use of this Application or related Services by the User.The User declares that he/she is aware that the Owner may be required to disclose personal data at the request of public authorities.

Further information on the User's personal data

At the User's request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third party services used by it may collect system logs, i.e. files that record interactions and that may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

Further details regarding the collection or processing of Personal Data may be requested from the Controller at any time. Please see the contact information at the beginning of this document.

How "Do Not Track" requests are handled

This Application does not support "Do Not Track" requests. To determine whether any of the third party services you use respect "Do Not Track" requests, please read their privacy policies.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or - to the extent technically and legally feasible - by sending a notice to Users via any contact information available to the Owner. You are strongly advised to check this page often, referring to the date of the last modification listed at the bottom. If the changes relate to processing activities performed on the basis of the User's consent, the Controller will collect a new consent from the User where required.

Definitions and legal references

Personal Data (or Data)

Any information that, directly, indirectly or in connection with other information, including a personal identification number, allows the identification or identifiability of a natural person.

Usage Data

This is the information collected automatically through this Application (or by third party applications integrated into this Application), including: IP addresses or domain names of the computers used by the User who connects with this Application, URI (Uniform Resource Identifier) notation addresses, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..), the country of origin, the characteristics of the browser and operating system used by the User, the various temporal connotations of the visit (e.g. the length of time spent on each page within the Application) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, and other parameters relating to the User's operating system and/or computer environment.

User

The individual who uses this Application which, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Controller (or Processor)

The natural or legal person, public authority, service or other body that processes Personal Data on behalf of the Controller, as described in this Privacy Policy.

Data Controller (or Controller)

The natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of Personal Data and the instruments adopted, including the security measures relating to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

This Application

The means by which the User's Personal Data are collected and processed.

Service

The Service provided by this Application as defined in the relevant terms (if any) on this Site/Application.

European Union (or EU)

Unless otherwise stated, all references made within this document to the European Union include all current member states of the European Union and the European Economic Area.

Biscuit

Cookies are trackers consisting of small sets of data stored in the user's browser.

Tracker

Tracker means any technology - e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of Users, e.g. by accessing or storing information on the User's device.

Legal information

This privacy policy has been drafted based on the provisions of multiple legislations, including Article 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy relates exclusively to this Application, unless otherwise specified within this document.